CN113296738A

CN113296738A - Quantum random number service management system, providing and requesting method and device

Info

Publication number: CN113296738A
Application number: CN202011226188.3A
Authority: CN
Inventors: 冯凯
Original assignee: Alibaba Group Holding Ltd
Current assignee: Alibaba Group Holding Ltd
Priority date: 2020-11-05
Filing date: 2020-11-05
Publication date: 2021-08-24
Anticipated expiration: 2040-11-05
Also published as: CN113296738B

Abstract

The application discloses a quantum random number service management system, a quantum random number service providing method and device, a quantum random number service requesting method and device, a computer storage medium and an electronic device; the system comprises: a first cluster and a client; the central quantum random number service platform deployed in the first cluster acquires quantum random numbers generated by quantum random number generation equipment through quantum random number generation equipment connected with a physical host, and stores the quantum random numbers as quantum random number resources in a random number storage pool deployed in the first cluster, wherein the central quantum random number service platform provides quantum random number resource services; and the client acquires the quantum random number resource based on the quantum random number resource service provided by the central quantum random number service platform. The potential safety hazard caused by connecting quantum random number generating equipment in a virtual environment is avoided, and the safety of the system and the application is improved.

Description

Quantum random number service management system, providing and requesting method and device

Technical Field

The application relates to the field of computer technology application, in particular to a quantum random number service management system, a quantum random number service providing method and device, and a quantum random number service requesting method and device. The application also relates to a computer storage medium and an electronic device.

Background

Quantum random number generators, which are currently the only random number generators capable of generating random sequences that are completely unpredictable in theory, have grown in production technology. Generally, a quantum random number generator includes devices based on interface forms such as USB and PCI-E, and the connection is realized by plugging, however, the connection method is not suitable for being deployed in a modern data center because of the following reasons:

firstly, a modern data center is established based on the development of virtualization technology, and from a virtual machine to a container, various resources such as a CPU (central processing unit), a memory, a network and the like of a physical host are used in a sharing mode. Therefore, due to the security requirement, the quantum random number acquisition realized by plugging and unplugging the quantum random number generator in the data center obviously has greater potential safety hazard.

And secondly, the price of the quantum random number generator is far higher than that of a hardware random number generator, and the problem of overhigh cost is caused by large-scale deployment.

Third, for the data center, sharing of various resources is mainly realized through a virtual technology, so that when a random number is generated based on a random number generation algorithm, the entropy value of a virtual machine system entropy source is too low, and the situation is mainly generated because the virtual system does not have an external I/O device under the virtual technology, so that random behavior is lacked as the entropy source, the entropy source is deficient, the generated random number is low in quality, and the system safety is further reduced. Meanwhile, the security application performance is also reduced under the condition of insufficient entropy sources.

Disclosure of Invention

The application provides a quantum random number service management system to solve the problem of safety in the prior art.

The application provides a quantum random number service management system, includes: a first cluster and a client;

the central quantum random number service platform deployed in the first cluster acquires quantum random numbers generated by quantum random number generation equipment through quantum random number generation equipment connected with a physical host, and stores the quantum random numbers as quantum random number resources in a random number storage pool deployed in the first cluster, wherein the central quantum random number service platform provides quantum random number resource services;

and the client acquires the quantum random number resource based on the quantum random number resource service provided by the central quantum random number service platform.

In some embodiments, further comprising: a second cluster;

the distributed quantum random number service platform deployed in the second cluster acquires the quantum random number resource through the central quantum random number service platform;

the distributed quantum random number service platform stores the acquired quantum random number resource in a random number storage pool deployed in the second cluster;

the client obtains the quantum random number resource based on the quantum random number resource service provided by the central quantum random number service platform, and the method comprises the following steps:

and the client acquires the quantum random number resource provided by the central quantum random number service platform to the distributed quantum random number service platform through the distributed quantum random number service platform.

In some embodiments, the obtaining, by the client through the distributed quantum random number service platform, the quantum random number resource provided by the central quantum random number service platform to the distributed quantum random number service platform includes:

the client selects the distributed quantum random number service platform meeting the distance requirement according to the distance between the client and the distributed quantum random number service platform;

and acquiring the quantum random number resource through the selected distributed quantum random number service platform.

In some embodiments, the distributed quantum random number service platform obtains the quantum random number resource from the central quantum random number service platform by calling a RESTful API interface.

In some embodiments, the client obtains the quantum random number resource from the distributed quantum random number service platform by calling a RESTful API interface.

In some embodiments, further comprising: determining whether the storage capacity of the stored quantum random number resource in a random number storage pool of the distributed quantum random number service platform meets the set resource storage capacity requirement;

and if not, acquiring the quantum random number resource from the central quantum random number service platform.

In some embodiments, the central quantum random number service platform obtains the quantum random number resource by calling a device interface provided by the quantum random number generation device connected to the physical host, respectively.

In some embodiments, when the central quantum random number service platform is connected to the physical host to form at least two quantum random number generation devices when acquiring the quantum random numbers, the central quantum random number service platform acquires the quantum random numbers through device interfaces provided by the quantum random number generation devices, respectively;

the central quantum random number service platform performs mixing processing on the obtained quantum random numbers from the at least two quantum random number generation devices to obtain a random number sequence;

and storing the random number sequence as the quantum random number resource in the random number storage pool deployed in the first cluster.

In some embodiments, the client obtains the quantum random number resource based on the central quantum random number service platform by calling a RESTful API interface.

In some embodiments, the client further comprises:

the client takes the acquired quantum random number resource as entropy source data and adds the entropy source data into an entropy pool;

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

In some embodiments, the client further comprises:

the client mixes the entropy source data added to the entropy pool with existing entropy source data in the entropy pool;

the determining the entropy source data as a random number seed comprises:

and taking the mixed entropy source data as the random number seed of a random number generation algorithm to generate the random number sequence.

In some embodiments, further comprising:

and the balanced load server is used for selecting the central quantum random number service platform capable of providing the quantum random number when the client acquires the quantum random number resource based on the quantum random number service provided by the central quantum random number service platform.

The application also provides a method for providing quantum random number service, which comprises the following steps:

acquiring a quantum random number generated by quantum random number generation equipment connected with a physical host based on a central quantum random number service platform;

taking the obtained quantum random number as a quantum random number resource and storing the quantum random number in a random number storage pool; wherein the random number storage pool is used for storing the quantum random numbers acquired by the quantum random number generation device;

in response to a quantum random number resource request, the central quantum random service platform provides the quantum random number resource.

In some embodiments, the obtaining, by the central quantum random number-based service platform, a quantum random number generated by a quantum random number generation device connected to a physical host includes:

and acquiring the quantum random number generated by the quantum random number generating equipment by calling an equipment interface provided by the quantum random number generating equipment connected to the physical host.

when at least two quantum random number generating devices connected with the physical host are provided, the quantum random numbers generated by different quantum random number generating devices are respectively obtained;

the storing the acquired quantum random number as a quantum random number resource in a random number storage pool includes:

mixing the respectively obtained quantum random numbers to obtain a random number sequence;

storing the sequence of random numbers as the quantum random number resource in the random number storage pool.

In some embodiments, said providing, by said central quantum random service platform, said quantum random number resource in response to a quantum random number resource request comprises:

determining the central quantum random number service platform capable of providing quantum random number resource service according to the quantum random number resource request;

and providing the quantum random number resource to a requester of the quantum random number resource request according to the determined central quantum random number service platform.

The present application also provides a device for providing quantum random number service, including:

the acquisition unit is used for acquiring the quantum random number generated by the quantum random number generation equipment connected with the physical host based on the central quantum random number service platform;

the storage unit is used for taking the acquired quantum random number as a quantum random number resource and storing the quantum random number in a random number storage pool; wherein the random number storage pool is used for storing the quantum random numbers acquired by the quantum random number generation device;

and the providing unit is used for responding to the quantum random number resource request, and the central quantum random service platform provides the quantum random number resource.

The application also provides a request method of quantum random number service, which comprises the following steps:

sending an acquisition request of quantum random number resources;

acquiring quantum random number resources provided by a central quantum random number service platform in response to the acquisition request, or acquiring the quantum random number resources provided by a distributed quantum random number service platform in response to the acquisition request; wherein the quantum random number resources provided by the distributed quantum random number service platform are from the quantum random number resources provided by the central quantum random number service platform;

and providing the quantum random number resource through an interface matched with the application requirement according to the application requirement of the quantum random number resource.

In some embodiments, the obtaining the quantum random number resource provided by the central quantum random number service platform in response to the obtaining request, or obtaining the quantum random number resource provided by the distributed quantum random number service platform in response to the obtaining request includes:

and acquiring the quantum random number resource provided by the central quantum random number service platform or the quantum random number resource provided by the distributed quantum random number service platform by calling a RESTful API (application program interface).

In some embodiments, further comprising:

adding the obtained quantum random number resource serving as entropy source data into an entropy pool;

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

In some embodiments, further comprising:

mixing the entropy source data added to the entropy pool with existing entropy source data in the entropy pool;

the determining the entropy source data as a random number seed comprises:

determining the random number seed of a random number generation algorithm according to the mixed entropy source data;

the providing the quantum random number resource through an interface matched with the application requirement according to the application requirement of the quantum random number resource comprises:

and providing the random number sequence through an interface matched with the application requirement according to the application requirement of the quantum random number resource.

The present application also provides a quantum random number service request apparatus, comprising:

the sending unit is used for sending an acquisition request of the quantum random number resource;

the acquisition unit is used for acquiring quantum random number resources provided by the central quantum random number service platform in response to the acquisition request, or acquiring the quantum random number resources provided by the distributed quantum random number service platform in response to the acquisition request; wherein the quantum random number resources provided by the distributed quantum random number service platform are from the quantum random number resources provided by the central quantum random number service platform;

and the providing unit is used for providing the quantum random number resource through an interface matched with the application requirement according to the application requirement of the quantum random number resource.

determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not in a random number storage pool corresponding to the distributed quantum random number service platform;

if not, sending a quantum random number resource request to the central quantum random number service platform;

acquiring the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request;

storing the acquired quantum random number resource to a random storage pool corresponding to the distributed quantum random number service platform;

and responding to a client acquisition request aiming at the quantum random number resource, and providing the quantum random number resource.

In some embodiments, the determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement in the random number storage pool corresponding to the distributed quantum random number service platform includes:

the distributed quantum random number service platform determines a random number storage pool corresponding to the distributed quantum random number service platform according to the received quantum random number acquisition request, and whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not;

or,

and determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not in a random number storage pool corresponding to the distributed quantum random number service platform according to the set monitoring period.

In some embodiments, further comprising:

and if the storage capacity of the stored quantum random number resource in the random number storage pool corresponding to the distributed quantum random number service platform meets the set resource storage capacity requirement, providing the quantum random number resource according to the received quantum random number resource request.

In some embodiments, the obtaining the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request comprises:

and acquiring the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request by calling a RESTful API (application program interface).

the determining unit is used for determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not in the random number storage pool corresponding to the distributed quantum random number service platform;

the sending unit is used for sending a quantum random number resource request to the central quantum random number service platform according to the determination result of the determining unit when the determination result is not satisfied;

the acquisition unit is used for acquiring the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request;

the storage unit is used for storing the acquired quantum random number resources into a random storage pool corresponding to the distributed quantum random number service platform;

and the providing unit is used for responding to an acquisition request of the client machine for the quantum random number resource and providing the quantum random number resource.

The application also provides a computer storage medium for storing the data generated by the network platform and a program for processing the data generated by the network platform;

when the program is read and executed, the following steps are executed:

in response to a quantum random number resource request, the central quantum random service platform providing the quantum random number resource;

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

providing the quantum random number resource through an interface matched with the application requirement according to the application requirement of the quantum random number resource;

or, the following steps are executed:

and storing the acquired quantum random number resources into a random storage pool corresponding to the distributed quantum random number service platform.

The present application further provides an electronic device, comprising:

a processor;

a memory for storing a program for processing network platform generated data, said program when read and executed by said processor performing the steps of:

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

or, the following steps are executed:

and storing the acquired quantum random number resources into a random storage pool corresponding to the distributed quantum random number service platform. .

Compared with the prior art, the method has the following advantages:

in the quantum random number service management system embodiment provided by the application, a quantum random number generated by a quantum random number generation device connected with a physical host is acquired through a central quantum random number service platform deployed in a first cluster, and the quantum random number is stored in a random number storage pool deployed in the first cluster as a quantum random number resource, so that the central quantum random number service platform can provide quantum random number resource service; and the client acquires the quantum random number resource based on the quantum random number resource service provided by the central quantum random number service platform. Therefore, quantum random number generating equipment does not need to be deployed on a client, potential safety hazards caused by connection of the quantum random number generating equipment in a virtual environment are avoided, the safety of the system and the application is improved, a resource management service mode is adopted for providing quantum random number resource services through the central quantum random number service platform deployed in the first cluster, and the problem of high cost caused by large-scale deployment of a data center can be effectively solved.

In some embodiments, the central quantum random number service platform, the random number storage pool, and the like in the first cluster may be expanded to ensure high throughput with high demand. When the demand is reduced, the central quantum random number service platform, the random number storage pool and the like in the first cluster can be reduced, and resource waste is avoided.

In some embodiments, the client may obtain the quantum random number resource based on the central quantum random number service platform without paying attention to the device interface of the underlying quantum random number generation device by calling the Restful API interface, and may further obtain the quantum random number resource provided by the central quantum random number service platform through the distributed quantum random number service platform deployed in the second cluster in terms of improving the obtaining rate and reducing the response delay.

In some embodiments, when the quantum random number generating devices corresponding to the central quantum random number service platform deployed in the first cluster include at least two quantum random number generating devices, the quantum random numbers respectively obtained may further be subjected to a mixing process of xor, so that a random number quality defect of the quantum random number generating device due to a generation principle or other reasons can be corrected.

In some embodiments, the quantum random number resource is used as entropy source data and added into an entropy pool, so that the problem that the quality of the generated random number is low and the security is poor due to the fact that the entropy source data in the entropy pool is poor is avoided.

Drawings

FIG. 1 is a schematic structural diagram of an embodiment of a QAMD service management system provided in the present application;

FIG. 2 is a block diagram of the working principle of a quantum random number service management system provided by the present application, which relates to a client;

FIG. 3 is a flow chart of an embodiment of a method for providing quantum random number service provided herein;

FIG. 4 is a schematic structural diagram of an embodiment of a device for providing quantum random number service provided in the present application;

FIG. 5 is a flow chart of an embodiment of a method for requesting quantum random number services provided herein;

FIG. 6 is a schematic structural diagram of an embodiment of a request device for quantum random number service provided in the present application;

FIG. 7 is a flow chart of an embodiment of a method for requesting quantum random number services provided herein;

FIG. 8 is a schematic structural diagram of an embodiment of a request device for quantum random number service provided in the present application;

fig. 9 is a schematic structural diagram of an embodiment of an electronic device provided in the present application.

Detailed Description

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present application. This application is capable of implementation in many different ways than those herein set forth and of similar import by those skilled in the art without departing from the spirit of this application and is therefore not limited to the specific implementations disclosed below.

The terminology used in the description herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. The description used in this application and in the appended claims is for example: the terms "a," "an," "first," and "second," etc., are not intended to be limiting in number or order, but rather are used to distinguish one type of information from another.

Based on the above description in the background art, it can be seen that the concept of the present application is a technical solution provided based on the safety and cost issues when the quantum random number generating device is deployed in the existing data. In the computer and big data era, establishing a protection barrier of privacy and security is one of the most important security engineering in the computer application field, and the foundation of the security engineering depends on random numbers, so that the quality of the random numbers directly influences the security of a computer system and even application.

Random numbers can be classified into pseudo random numbers and true random numbers according to the manner in which they are produced. Pseudo-random numbers are statistically seemingly random sequences generated using deterministic algorithms, with randomness depending on the seed and the algorithm. At present, pseudo-random number generators are widely used in the field of computers. The pseudo-random number can crack the sequence of the pseudo-random number generator through various attack means, so that the problem of potential safety hazard of the pseudo-random number exists in an application scene with higher requirements. The true random number is a random sequence obtained by observing and sampling a non-deterministic physical process, for example, data from a physical random source is collected to generate a random number, data from a mouse, a keyboard and other devices are collected, and a quantum random number is generated by a quantum random number generator. Quantum random Number Generator (QRING) is based on the inherent randomness of quantum mechanics theory, can generate unpredictable and infinite-length random sequences, and is the most ideal random Number generation technology so far.

However, in order to improve security in an application scenario facing a data center, a quantum random number generator is deployed, the quantum random number generator connected to a physical host needs to be arranged to generate and apply quantum random numbers, and in order to improve resource utilization and facilitate system deployment and maintenance, the data center is popularized by a virtualization technology, so that resources such as networks and storage can be shared by a virtual technology.

Therefore, in view of the above considerations, the embodiments of the present application provide a solution capable of implementing resource utilization and service of quantum random numbers, so that when providing quantum random numbers for a data center, not only can the security of the data center be ensured, but also the deployment cost of quantum random generation equipment can be reduced, and the following describes in detail a quantum random number service management system provided in the present application.

As shown in fig. 1, fig. 1 is a schematic structural diagram of an embodiment of a quantum random number service management system provided in the present application, where the system includes: a first cluster and a client;

the method comprises the steps that a central quantum random number service platform is deployed in a first cluster, quantum random numbers generated by quantum random number generation equipment are obtained through the quantum random number generation equipment connected with a physical host, the quantum random numbers are stored in a random number storage pool deployed in the first cluster as quantum random number resources, and the central quantum random number service platform provides quantum random number resource services.

In this embodiment, the first cluster may be understood as a central cluster, and the central cluster is the first cluster in the following description. The central cluster aims to service and manage the quantum random numbers, and manages the generated quantum random numbers as service resources so as to provide quantum random number service.

In this embodiment, deploying in the central cluster includes: the system comprises a central quantum random number service platform, a physical host, a quantum random number generation device and a random number storage pool. The central quantum random number service platform can obtain the quantum random number generated by the quantum random number generation equipment by calling an equipment interface provided by the quantum random number generation equipment connected with the physical host. The acquired quantum random numbers can be stored in a random number storage pool configured for the central quantum random number service platform in a central cluster. As shown in fig. 1, in this embodiment, a central cluster may deploy a plurality of central quantum random number service platforms, where each central quantum random number service platform corresponds to a physical host and a random number storage pool. The number of quantum random number generating devices connected to the physical host is not limited, and in this embodiment, two central quantum random number service platforms are taken as an example, that is, the central quantum random number service platform a manages one physical host a, the physical host a connects two quantum random number generating devices a1 and a2, and the central quantum random number service platform a stores the quantum random numbers generated by the quantum random number generating devices a1 and a2 in the random number storage pool a through the device interfaces provided by the quantum random number generating devices a1 and a 2. The central quantum random number service platform B manages a physical host B, the physical host B is connected with two random number generation devices B1 and B2, and the central quantum random number service platform B stores quantum random numbers generated by the quantum random number generation devices B1 and B2 into a random number storage pool B through device interfaces provided by the quantum random number generation devices B1 and B2. And the device interface provides a use mode of corresponding interface service when the quantum random number generation device is applied. The quantum random number generating device is not a core of the embodiment of the application and is not described in detail, and it can be understood that the quantum random number generating device may be from different manufacturers, so that the provided device interface services are different, and the quantum random number is obtained by calling the device interface.

It is understood that any one of the physical hosts a and B may be connected to one quantum random number generating device or to a plurality of quantum random number generating devices. That is, the number of the central quantum random number service platforms in the central cluster may be arranged according to the application requirements, for example: the number of the quantum random number storage pools can be one or more, and similarly, a physical host connected with the central quantum random number service platform, a quantum random number generation device connected with the physical host, and a quantum random number storage pool can be configured according to application requirements. For example: the quantum random number storage pool can be only one or respectively correspond to the number of the deployed middle central quantum random number service platforms.

Taking the central quantum random number service platform a as an example, when there are at least two quantum random number generation devices connected to the physical host a, that is: quantum random number generating devices a1 and a 2; the central quantum random number service platform A performs mixing processing on the obtained quantum random numbers to obtain a random number sequence, and the random number sequence is stored in a quantum random number storage pool A corresponding to the central quantum random number service platform A as a quantum random number resource. As shown in fig. 1, the central quantum random number service platform B may also perform processing and storing of quantum random numbers by using the above-described process.

In this embodiment, the central quantum random number service platform a may perform exclusive OR (XOR) calculation on the obtained quantum random numbers from the at least two quantum random number generation devices, that is, perform XOR calculation on the random numbers from the quantum random number generation device a1 and the quantum random number generation device a2, to obtain a mixed random number sequence. The XOR calculation processing may be that when two random numbers generated by different random number generation devices are the same, the XOR result is 0; in contrast, the xor result is 1, and since the xor calculation process belongs to the prior art, it is only described in a general way here.

It should be noted that, in this embodiment, as to whether to perform the exclusive-or calculation, whether the obtained quantum random numbers are in an exclusive-or mode may be determined, that is, whether the obtained quantum random numbers come from multiple quantum random number generation devices of different types, which is not limited to different quantum random number generation devices, and the quantum random numbers may also be mixed by using the exclusive-or calculation processing from multiple same quantum random number generation devices, so as to obtain the quantum random number sequence.

In this embodiment, the xor processing is performed on the quantum random numbers from the different types of quantum random number generation devices, and the xor processing may be used to correct the quality problem of the quantum random numbers caused by the defects in the working principle or design of the quantum random number generation devices, so as to improve the quality of the quantum random numbers provided by the central quantum random number service platform.

The foregoing is a description of the deployment and functional principles of the first cluster in the embodiments of the quantum random number service management system provided in the present application. The following describes the deployment and functional principles of the client in the embodiments of the quantum random number service management system provided in the present application.

In this embodiment, the client may obtain the quantum random number resource provided by the central quantum random number service platform deployed in the first cluster, and the specific obtaining manner may obtain the quantum random number resource service provided by the central quantum random number service platform based on the RESTful API interface by calling the RESTful API interface. Wherein, REST in the RESTful API interface is all called REpresentational State Transfer, that is: and (5) representing layer state transition. REST describes a form of interaction between a client (client) and a server (server) in a network, and a RESTful API interface is an interface implemented based on an http protocol, that is: an API with the REST style is http-based and may use xml format definition or json format definition. The OpenAPI specification gives a very specific specification for the RESTful API interface in detail, which has become a de facto standard in the field of RESTful API interface design, and the RESTful API interface is only described schematically here.

The client acquires the quantum random number resource from the first cluster through the RESTful API interface, the limitation of the type of quantum random generation equipment in the first cluster can be avoided, and the RESTful API interface can decouple the client from various types of quantum random generation equipment interfaces, so that the client does not need to care about the quantum random generation equipment interfaces and acquires the quantum random number resource by calling the RESTful API interface. Moreover, the client acquires the quantum random number resource through the central quantum random number service platform, and quantum random number generating equipment does not need to be deployed on the client, so that potential safety hazards caused by connection of the quantum random number generating equipment in a virtual environment and cost problems caused by deployment of a large amount of quantum random number generating equipment are avoided.

In this embodiment, the provided first cluster may elastically stretch according to the demand of the client for the quantum random number resource, and when the demand increases, capacity expansion may be performed on the central quantum random number service platform, the random number storage pool, and the like in the first cluster, so as to ensure high throughput with high demand. When the demand is reduced, the central quantum random number service platform, the random number storage pool and the like in the first cluster can be reduced, and resource waste is avoided.

The central quantum random number service platform deployed in the first cluster provides quantum random number resource service and adopts a resource management service mode, so that the problem of high cost caused by large-scale deployment of a data center can be effectively solved.

The above is a description of the first cluster referred to in the embodiments of the present application.

Considering that in the face of a large-scale data center, in order to avoid providing quantum random number resource service delay, the embodiment further includes: the second cluster includes: distributed quantum random number service platform, random number storage pool.

A distributed quantum random number service platform deployed in the second cluster acquires the quantum random number resource through the central quantum random number service platform;

and the distributed quantum random number service platform stores the acquired quantum random number resource in a random number storage pool deployed in the second cluster.

In this embodiment, the second cluster may include a plurality of distributed quantum random number service platforms and a random number storage pool corresponding to the distributed quantum random number service platforms.

When the distributed quantum random number service platform acquires the quantum random number resource from the central quantum random number service platform, the quantum random number resource can be acquired from the central quantum random number service platform by calling RESTful API interface. The aforementioned descriptions of the RESTful API interface are omitted herein for brevity.

In order to ensure that the distributed quantum random number service platform can stably provide quantum random number resources to the client, whether the storage capacity of the stored quantum random number resources in the random number storage pool of the distributed quantum random number service platform meets the set resource storage capacity requirement or not needs to be determined, and if not, the quantum random number resources need to be acquired from the central quantum random number service platform. In other words, when the distributed quantum random number service platform monitors that quantum random number resources in a random number storage pool (local random number storage pool) corresponding to the distributed quantum random number service platform are few, the distributed quantum random number service platform requests quantum random number resources from a central quantum random number service platform, and supplements the acquired quantum random number resources to the local random number storage pool of the distributed quantum random number service platform, so that the stability of a client in acquiring the quantum random number resources from the distributed quantum random number service platform is ensured, delay is avoided, and the response speed of acquiring the request is improved.

It should be noted that, the distributed quantum random number service platform may monitor a storage state of the local random number storage pool according to a configured monitoring period, or may trigger monitoring of the local random number storage pool when receiving a quantum random number acquisition request from the client.

The distributed quantum random number service platform can also be elastically stretched according to the requirements of clients, namely when the demand increases, the distributed quantum random number service platform deployed in the second cluster and a corresponding random number storage pool can be expanded to realize high throughput; when the demand is reduced, curtailment can be performed to avoid wasting resources.

The above is the description of the second cluster in this embodiment.

It is understood that the random number pool deployed corresponding to the central quantum random number service platform and the random number pool deployed corresponding to the distributed quantum random number service platform, whether the first cluster or the second cluster, can be local random number pools, and the pools can be in a cache form. In this embodiment, the second cluster may be deployed in a different area.

The following describes a client related to the embodiment of the present application:

the client can acquire the quantum random number resource provided by the central quantum random number service platform to the distributed quantum random number service platform through the distributed quantum random number service platform. The Guest (Guest) is a logical host that is virtualized on a physical host by a virtualization technique, so that various types of resources on the physical host can be used in a shared manner, and thus, the Guest may also be referred to as a virtual machine. The physical Host may be referred to as a Host (Host), i.e., the physical Host where the virtual machine is located.

In this embodiment, the number of the clients may include a plurality of clients or one client, that is, the clients may also exist in a cluster, and the number of the clients in the cluster is not limited.

It should be particularly noted that, the physical hosts in the first cluster and the physical hosts of the clients are different because of differences in deployment environment and functions, and the physical hosts in the first cluster are connections capable of being connected with the quantum random number generating device, so that the central quantum random number service platform can obtain the quantum random numbers generated by the quantum random number generating device through the physical hosts. And the physical host in the client is a logical host capable of realizing virtual output, and the connection relation between the physical host and the quantum random number generation device is not considered.

Referring to fig. 2 in conjunction with fig. 1, fig. 2 is a block diagram illustrating an operational principle of a quantum random number service management system according to the present application, which relates to a client.

In this embodiment, the client may be an application end including a virtualization technology, for example, the client may deploy an application of a quantum random number service or some other security application, for example: TLS (Transport Layer Security Protocol), SSH (Security Shell), IPSec (Internet Protocol Security Protocol). When the client only needs to adopt the random number as the security protection, the quantum random number in the quantum random number resource acquired from the first cluster or the second cluster can be directly utilized for the security protection application. When the client needs to generate the pseudo random number by using the pseudo random number algorithm, the quantum random number resource acquired from the first cluster or the second cluster can be used as a random number seed, and the pseudo random number is generated by the pseudo random number generation algorithm, because the seed of the generated pseudo random number comprises the quantum random number resource, so that the pseudo random number has better security.

When a client (which can be understood as a virtual machine) is in a virtual technology environment, due to the lack of an external device, entropy source data in an entropy pool of the client is deficient, so that the quality of generated random numbers is low, and the security is poor. The entropy source may be understood as an external device providing entropy, the entropy may be understood as seed data generating random numbers, and the entropy source data may be understood as entropy. Therefore, there is a need to ensure that there is entropy in the virtual machine entropy pool that meets the requirements. Therefore, in this embodiment, the client may further include:

adding the obtained quantum random number resource as entropy source data into an entropy pool;

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

In this embodiment, the obtained quantum random number resource may be an RNDADDENTROPY request provided by a client based on an ioctl interface, and the quantum random number resource obtained from a distributed quantum random number service platform or a central quantum random number service platform is added to the entropy pool. The ioctl is a function for managing an I/O channel of the device in the device driver, and the program can send information such as a command and parameter configuration to the device through the ioctl.

In order to further ensure the quality of random number generation, the client may further mix the entropy source data added to the entropy pool with the existing entropy source data in the entropy pool, and in this embodiment, the client may mix and stir the obtained quantum random number resource with the existing entropy source data in the entropy pool through a Linear Feedback Shift Register (LFSR), use the mixed entropy source data as a random number seed of a random number generation algorithm, and then generate the random number sequence. In this embodiment, the random number generation algorithm may be an algorithm involved in a pseudo random number generator, such as: a cryptographical Secure Pseudo-Random Number Generator (CSPRNG), which is commonly used as an algorithm with MD5 or SHA1, and can change the information with an indefinite length into a 128 binary or 160 binary Random Number with a definite length. Of course, a True Random Number Generator (TRNG), a Pseudo Random Number Generator (PRNG), and the like may also be used.

The security application software of the client can acquire the generated pseudo-random number through a/dev/urandom interface or a/dev/random interface; the client system kernel can acquire the generated pseudo random number through a get _ random _ bytes () interface; the method comprises the steps that a/dev/urandom interface and a/dev/random interface are provided by an operating system and used for a random number generator deployed in a client, pseudo random numbers are obtained through the/dev/urandom interface, and true random numbers (quantum random numbers) are obtained through the/dev/random interface.

It should be noted here that, as to whether the acquired quantum random number resource needs to be added to the entropy pool as entropy source data, it may be determined whether existing entropy source data in the entropy pool satisfies an addition condition, and if so, indicating that the existing entropy source data is insufficient, the acquired quantum random number resource is added to the entropy pool as entropy source data. Otherwise, no addition is required.

The above is a description of the client in the embodiments of the quantum random number service management system of the present application.

It can be understood that, when the client obtains the quantum random number resource from the central quantum random number service platform or the distributed quantum random number service platform, in order to ensure the quantum random number resource to be optimally used, and achieve the purpose of maximizing throughput rate and avoiding overload, the embodiment may further include:

the load balancing server may be respectively arranged in the first cluster and the second cluster, so that when the client obtains the quantum random number resource from the central quantum random number service platform deployed in the first cluster, the central quantum random number service platform capable of currently providing the quantum random number resource may be selected according to the operating state of the central quantum random number service platform deployed in the first cluster, and the quantum random number resource is provided to the client, thereby achieving load balancing, and avoiding or reducing delay; or, when the client obtains the quantum random number resource from the distributed quantum random number service platform deployed in the second cluster, the distributed quantum random number service platform capable of currently providing the quantum random number resource may be selected according to the running state of the distributed quantum random number service platform deployed in the second cluster, so as to achieve load balancing and avoid delay or reduce delay.

When the client acquires the quantum random number resources from the central quantum random number service platform in the first cluster, in order to optimize resource use and achieve the purposes of maximizing throughput rate and avoiding overload, the central quantum random number service platform which can currently provide the quantum random number resources is selected in the first cluster according to the running state of the central quantum random number service platform, so that load balance is achieved.

The foregoing is a specific description of an embodiment of a quantum random number service management system provided in the present application, and the working principle of the embodiment of the quantum random number service management system is summarized and described based on the foregoing specific contents:

and the quantum random number resources acquired from the quantum random number generation equipment are stored in the first cluster through the deployed central quantum random number service platform and are stored in the locally deployed quantum random number storage pool. The central quantum random number service platform provides related services of the quantum random number, such as quantum random number resource, to a requester according to the received acquisition request of the quantum random number, and the providing mode can be realized by calling RESTful API interface. In this embodiment, the requestor may be a client or a distributed quantum random number service platform in the second cluster, and when the requestor is the distributed quantum random number service platform, the distributed quantum random number service platform stores quantum random number resources acquired from the central quantum random number service platform in a local random number storage pool corresponding to the distributed quantum random number service platform, so as to be acquired by the requestor of the quantum random number, so as to improve acquisition efficiency and performance of the quantum random number.

When the requesting party is the client, based on the first cluster and the second cluster, the client can select the distributed quantum random number service platform in the second cluster with a short distance according to the acquisition efficiency and performance to acquire the quantum random number resource. Furthermore, when the client acquires the quantum random number resource through the distributed quantum random number service platforms deployed in the second cluster, the client can select the distributed quantum random number service platforms meeting the distance requirement according to the distance between the distributed quantum random number service platforms. In other words, the client may obtain quantum random number resources from a distributed quantum random number service platform located in a local computer room nearby.

The client can directly apply the acquired quantum random number resources according to application requirements, certainly, the quantum random numbers in the acquired quantum random number resources can also be used as seeds to regenerate the required random numbers by adopting a random number algorithm provided by application, and the regenerated random numbers use the quantum random numbers as seeds, so that the safety is higher than that of the random numbers generated by a traditional pseudo-random number generator.

In view of the above, the present application further provides a method for providing quantum random number service, please refer to fig. 3 in conjunction with fig. 1, where fig. 3 is a flowchart of an embodiment of the method for providing quantum random number service provided by the present application; the embodiment of the providing method is described in the perspective of a central quantum random number service platform deployed in a first cluster, but of course, the providing of the quantum random number service may also be provided by a provider with quantum random number resources, for example: the distributed quantum random number service platform (described in detail below) or other servers or clients storing quantum random number resources, and therefore, the provider providing the quantum random number service is not limited to the central quantum random number service platform provided in this embodiment. Next, the present embodiment is described in detail, and includes:

step S301: acquiring a quantum random number generated by quantum random number generation equipment connected with a physical host based on a central quantum random number service platform;

the purpose of step S301 is to obtain quantum random numbers. In this embodiment, in view of the fact that resources are shared in the application environment of adopting a virtual machine or a container, the quantum random number is obtained through connection with the quantum random number generation device, which has a great potential safety hazard, and the cost of the quantum random number generation device is higher than that of the conventional random number generation device, so that the cost is not increased in a large-scale deployment scenario. Therefore, the central quantum random number service platform is used for providing quantum random number service, and the quantum random generation device is connected to the physical host corresponding to the central quantum random number service platform, the central quantum random number service platform has no virtual environment, and the quantum random generation device does not have a connection relationship with the client (the client can also be understood as a virtual machine).

In this embodiment, for the physical host, it may be connected to one or more quantum random number generation devices, where the quantum random number generation devices may be of different models or from different manufacturers, and of course, may also be of the same model or the same manufacturer. The number of the central quantum random number service platforms can be matched with the number of the physical hosts. Then, when acquiring the quantum random number generated by the quantum random number generation device, the acquisition may be performed through device interfaces provided by different quantum random number generation devices.

It can be understood that, in this embodiment, one central quantum random number service platform corresponds to one physical host, and one physical host is connected to two quantum random number generation devices, and in practical applications, the number and the deployment manner of the central quantum random number service platform, the physical host, and the quantum random number generation devices may be adjusted, without being limited by the above embodiment.

Based on the deployment manner in this embodiment, the specific implementation process of step S301 may include:

step S301-1: and when the physical host is connected with at least two quantum random number generating devices, the quantum random numbers generated by different quantum random number generating devices are respectively obtained.

Step S302: taking the obtained quantum random number as a quantum random number resource and storing the quantum random number in a random number storage pool; wherein the random number storage pool is used for storing the quantum random numbers acquired by the quantum random number generation device;

the purpose of step S302 is to store the acquired quantum random number resource into a random number storage pool corresponding to the central quantum random number service platform.

In this embodiment, the deployment number of the random number storage pool is matched with the number of the quantum random number service platforms, and certainly, the quantum random numbers acquired by all the deployed quantum random number service platforms may be stored in one shared random number storage pool.

Based on the step S301-1, the specific implementation process of the step S302 may include:

step S302-1: mixing the respectively obtained quantum random numbers to obtain a random number sequence;

step S302-2: storing the sequence of random numbers as the quantum random number resource in the random number storage pool.

Step S303: in response to a quantum random number resource request, the central quantum random number service platform provides the quantum random number resource.

The purpose of step S303 is to provide the quantum random number resource.

The specific implementation process of step S303 may include:

step S303-1: determining the central quantum random number service platform capable of providing quantum random number resource service according to the quantum random number resource request;

step S303-2: and providing the quantum random number resource to a requester of the quantum random number resource request according to the determined central quantum random number service platform.

When the quantum random number resource is requested to be provided based on the quantum random number resource, the quantum random number resource may be provided by calling a RESTful API interface, and for the RESTful API interface, reference may be made to the description in the embodiment of the quantum random number service management system provided in the present application, and details are not repeated here.

It should be noted that, when there are at least two central quantum random number service platforms, the central quantum random number service platform providing the quantum random number resource may be selected according to the operating state of the central quantum random number service platform, so as to achieve the purpose of load balancing, and avoid response delay or reduce delay.

The description of the embodiment of the method for providing quantum random number service provided by the present application is only a summary description, and specific contents may refer to the description of the embodiment of the quantum random number service management system, which is not repeated herein.

The above is a detailed description of an embodiment of a method for providing quantum random number service provided by the present application, and corresponds to the aforementioned embodiment of a method for providing quantum random number service, and the present application further discloses an embodiment of an apparatus for providing quantum random number service, please refer to fig. 4, since the apparatus embodiment is basically similar to the method embodiment, the description is relatively simple, and related points can be found by referring to part of the description of the method embodiment. The device embodiments described below are merely illustrative.

As shown in fig. 4, an embodiment of a device for providing quantum random number service provided by the present application includes:

an obtaining unit 401, configured to obtain, based on the central quantum random number service platform, a quantum random number generated by a quantum random number generating device connected to the physical host;

the obtaining unit 401 may specifically include:

and the calling interface subunit is used for acquiring the quantum random number generated by the quantum random number generating device by calling a device interface provided by the quantum random number generating device connected to the physical host.

The obtaining unit 401 may be specifically configured to, when at least two quantum random number generation devices connected to the physical host are provided, respectively obtain the quantum random numbers generated by different quantum random number generation devices.

A storage unit 402, configured to store the obtained quantum random number as a quantum random number resource in a random number storage pool; wherein the random number storage pool is used for storing the quantum random numbers acquired by the quantum random number generation device;

the storage unit 402 may specifically include:

the mixing processing subunit is used for mixing the quantum random numbers respectively obtained to obtain a random number sequence;

a storage subunit, configured to store the random number sequence as the quantum random number resource in the random number storage pool.

A providing unit 403, configured to respond to a quantum random number resource request, where the quantum random number resource is provided by the central quantum random service platform.

The providing unit 403 may specifically include:

a determining subunit, configured to determine, according to the quantum random number resource request, the central quantum random number service platform capable of providing quantum random number resource services;

and the providing subunit is used for providing the quantum random number resource to the requester of the quantum random number resource request according to the central quantum random number service platform determined by the determining subunit.

The above is a schematic description of an embodiment of a device for providing a quantum random number service provided in the present application, and for specific description of the embodiment of the providing device, reference may be made to the content of the embodiment of the method for providing a quantum random number service provided in the present application, and details are not repeated here.

Fig. 5 is a flowchart illustrating an embodiment of a method for requesting quantum random number service provided in the present application, where fig. 5 is a flowchart illustrating the method for requesting quantum random number service provided in the present application; in this embodiment, the description is mainly made in the viewpoint of a client requesting a service for acquiring quantum random numbers. In fact, the requestor for the quantum random number service is not limited to the client, but may be other servers, such as: the distributed quantum random number service platform described above will be described in detail in the following with respect to the point that the distributed quantum random number service platform serves as a quantum random number service as a requestor, and will be briefly described here. Of course, the requestor of the quantum random number service may also be an end side deployed in or outside the data center, or other end sides within the network range that have requirements for the quantum random number service, and therefore, the requestor of the quantum random number service is not limited to the client mentioned in this embodiment. In this embodiment, the method includes:

step S501: sending an acquisition request of quantum random number resources;

the purpose of step S501 is to obtain quantum random number resources, and then, an obtaining request needs to be issued to a provider providing quantum random number service. In this embodiment, the provider of the quantum random number service may be a central quantum random number service platform in the first cluster or a distributed quantum random number service platform in the second cluster.

It is understood that, when the client sends an acquisition request to the distributed quantum random number service platform, if quantum random number resources in a random number storage pool of the distributed quantum random number service platform are insufficient, the acquisition request may be forwarded to the central quantum random number service platform through the distributed quantum random number service platform.

Step S502: acquiring quantum random number resources provided by a central quantum random number service platform in response to the acquisition request, or acquiring the quantum random number resources provided by a distributed quantum random number service platform in response to the acquisition request; wherein the quantum random number resources provided by the distributed quantum random number service platform are from the quantum random number resources provided by the central quantum random number service platform;

in the step S502, when the client obtains the quantum random number resource from the central quantum random number service platform or the distributed quantum random number service platform, a RESTful API interface may be called, and for the RESTful API interface, the content of the embodiment of the quantum random number service management system described in the foregoing application may be referred to, where only a RESTful API (REpresentational State Transfer) interface is briefly described here, and the RESTful API may also be an API with a REST style, and based on HTTP, an XML format definition or a JSON format definition may be used.

To improve response speed, delay is avoided. The client can select the distributed quantum random number service platform meeting the distance requirement according to the distance between the client and the distributed quantum random number service platform. Namely: the client can obtain quantum random number resources from a distributed quantum random number service platform located in a local computer room nearby.

Of course, in consideration of load balancing of the distributed quantum random number service platform, the client may also obtain quantum random number resources based on the distributed quantum random number service platform capable of providing the quantum random number service, which is determined according to the running state of the distributed quantum random number service platform. Similarly, when the client acquires the quantum random number resource from the central quantum random number service platform, the quantum random number resource may also be acquired by the central quantum random number service platform which is determined according to the running state of the central quantum random number service platform and can provide the quantum random number service. Therefore, load balance among the central quantum random number service platforms can be realized; or load balancing is realized among the distributed quantum random number service platforms.

After the client acquires the quantum random number resource, if the application requirement of the client side needs to regenerate the random number, the random number is regenerated mainly according to a random number generation algorithm deployed by the application requirement. However, random number generation typically relies on the state of one or more hardware components in the computer, which then lacks an external device for the client, thereby resulting in less entropy source data in the entropy pool when generating random numbers. Entropy source data is a quantization standard that measures randomness or unpredictability of random numbers, and is also an important parameter for extracting random characteristics from an original signal. Therefore, when the entropy source data in the entropy pool is less, the randomness of generating the random number is affected, and therefore, the method further comprises the following steps:

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

In this embodiment, the obtained quantum random number resource may be an RNDADDENTROPY request provided by a client based on an ioctl interface, and the quantum random number resource obtained from a distributed quantum random number service platform or a central quantum random number service platform is added to the entropy pool.

In order to further ensure the quality of random number generation, the client may further mix the entropy source data added to the entropy pool with the existing entropy source data in the entropy pool, and in this embodiment, the client may mix and stir the obtained quantum random number resource with the existing entropy source data in the entropy pool through a Linear Feedback Shift Register (LFSR), use the mixed entropy source data as a random number seed of a random number generation algorithm, and then generate the random number sequence. In this embodiment, the random number generation algorithm may be an algorithm involved in a pseudo random number generator, such as: Pseudo-Random Number generators (CSPRNG) are commonly used algorithms such as MD5 or SHA1, which can change the information with indefinite length into 128 binary or 160 binary Random numbers with definite length.

Step S503: and providing the quantum random number resource through an interface matched with the application requirement according to the application requirement of the quantum random number resource.

When the client provides the random number to the application software with the application requirement, corresponding provision may be performed according to different application requirements, and specific contents may refer to the description of the foregoing quantum random number service management system embodiment, which is not repeated herein.

Based on the above, the present application further provides a request device for quantum random number service, please refer to fig. 6, where fig. 6 is a schematic structural diagram of an embodiment of the request device for quantum random number service provided by the present application, and the embodiment of the request device corresponds to the embodiment of the request method, therefore, the description of the embodiment of the request device is only a schematic description, and specific contents may refer to the description of the embodiment of the request method and the embodiment of the quantum random number service management system. The embodiment of the request device comprises:

a sending unit 601, configured to send an acquisition request of a quantum random number resource;

an obtaining unit 602, configured to obtain a quantum random number resource provided by a central quantum random number service platform in response to the obtaining request, or obtain the quantum random number resource provided by a distributed quantum random number service platform in response to the obtaining request; wherein the quantum random number resources provided by the distributed quantum random number service platform are from the quantum random number resources provided by the central quantum random number service platform;

a providing unit 603, configured to provide, according to an application requirement for the quantum random number resource, the quantum random number resource through an interface matched with the application requirement.

The obtaining unit 602 may be specifically configured to obtain the quantum random number resource provided by the central quantum random number service platform or the quantum random number resource provided by the distributed quantum random number service platform by calling a RESTful API interface.

This embodiment still includes:

the adding unit is used for adding the acquired quantum random number resource serving as entropy source data into an entropy pool;

a determining unit, configured to determine the entropy source data as a random number seed;

and the generating unit is used for generating a random number sequence according to the random number seed.

Further comprising: a mixing unit, configured to mix the entropy source data added to the entropy pool with existing entropy source data in the entropy pool.

The determining unit is specifically configured to determine the random number seed of the random number generation algorithm according to the entropy source data mixed in the mixing unit.

The providing unit 603 is specifically configured to provide the random number sequence through an interface matched with an application requirement of the quantum random number resource according to the application requirement.

The foregoing is a description of an embodiment of a method and an apparatus for requesting quantum random number service provided by the present application from a client-side perspective, and specific contents may be combined with the above detailed description of the embodiment of the quantum random number service management system.

With reference to the above, the present application further provides a method for requesting quantum random number service, where the method is described in terms of a distributed quantum random number service platform in a second cluster, please refer to fig. 7, where fig. 7 is a flowchart of an embodiment of the method for requesting quantum random number service provided by the present application, and the embodiment of the method for requesting quantum random number service includes:

step S701: determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not in a random number storage pool corresponding to the distributed quantum random number service platform;

the purpose of step S701 is to obtain whether the quantum random number resources stored in the local random number storage pool corresponding to the distributed quantum random number service platform meet the resource storage requirement. Then, the trigger condition for determining the action may be the reception of a quantum random number acquisition request sent by the client or other end side or the triggering of a set monitoring period; of course, the triggering can also be performed by real-time monitoring. Therefore, the specific implementation process of step S701 may include:

step S701-1: the distributed quantum random number service platform determines a random number storage pool corresponding to the distributed quantum random number service platform according to the received quantum random number acquisition request, and whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not;

or,

step S701-2: and determining whether the storage capacity of the stored quantum random number resource meets the set resource storage capacity requirement or not in a random number storage pool corresponding to the distributed quantum random number service platform according to the set monitoring period.

Step S702: if not, sending a quantum random number resource request to the central quantum random number service platform;

in step S702, when the quantum random number resource in the local random number storage pool corresponding to the distributed quantum random number service platform does not meet the requirement, the distributed quantum random number service platform requests the quantum random number resource from the central quantum random number service platform providing the quantum random number service to supplement the local random number storage pool, so as to ensure the efficiency of providing the quantum random number resource to the distributed quantum random number service platform by the client and improve the response speed.

The above is described for the case where the determination result of step S701 is not satisfied, and when the determination result of step S701 is satisfied, the method may further include:

providing the quantum random number resource according to the received quantum random number resource request. Specifically, the distributed quantum random number service platform directly provides quantum random number resources stored in the local random number storage pool to the client according to the received quantum random number resource request sent by the client side.

Step S703: acquiring the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request;

the specific implementation process of step S703 may be that the distributed quantum random number service platform obtains the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request by calling a RESTful API interface.

It should be noted that, in this embodiment, the distributed quantum random number service platform acquires the quantum random number resource from the central quantum random number service platform, and the client acquires the quantum random number resource from the distributed quantum random number service platform in the above embodiment, and the client acquires the quantum random number resource from the central quantum random number service platform in the above embodiment, both may be in a manner of calling a RESTful API interface, so that the client does not need to pay attention to the type interface of the central quantum random number service platform accessing the quantum random number generation device, and can acquire the quantum random number resource from the central quantum random number service platform or the distributed quantum random number service platform only by calling the RESTful API interface.

Step S704: storing the acquired quantum random number resource to a random storage pool corresponding to the distributed quantum random number service platform;

step S705: and responding to a client acquisition request aiming at the quantum random number resource, and providing the quantum random number resource.

For a distributed quantum random number service platform, the distributed quantum random number service platform may be deployed in a cluster of a data center, such as the second cluster in the foregoing quantum random number service management system embodiment, a plurality of distributed quantum random number service platforms may be deployed in the cluster, the cluster may also be deployed in different areas according to requirements, a cluster deployed in each area may include a plurality of distributed quantum random number service platforms, each distributed quantum random number service platform may respectively correspond to a local random number storage pool or a public random number storage pool, and a specific deployment manner may be deployed according to at least one of a data center architecture and a user requirement (client requirement). In this embodiment, each distributed quantum random number service platform is provided with a local random number storage pool. However, the specific deployment is not limited to this embodiment.

The above is a schematic description of an embodiment of a request method for quantum random number service provided in the present application, and for this part of description, reference may be made to the description of the second cluster related in the foregoing embodiment of the quantum random number service management system, and details are not repeated here.

Corresponding to the embodiment of the method for requesting quantum random number service provided by the present application, the present application further provides an embodiment of a device for requesting quantum random number service, and as shown in fig. 8, the embodiment of the device for requesting quantum random number service includes:

a determining unit 801, configured to determine whether a random number storage pool corresponding to the distributed quantum random number service platform and a storage amount of a stored quantum random number resource meet a set resource storage amount requirement;

the determination unit 801 includes: a first determining subunit or a second determining subunit;

the first determining subunit is configured to determine, by the distributed quantum random number service platform according to the received quantum random number acquisition request, a random number storage pool corresponding to the distributed quantum random number service platform, where whether the storage capacity of the stored quantum random number resource meets a set resource storage capacity requirement;

and the second determining subunit is configured to determine, according to the set monitoring period, whether the random number storage pool corresponding to the distributed quantum random number service platform satisfies the set resource storage requirement or not.

A sending unit 802, configured to send a quantum random number resource request to a central quantum random number service platform according to a determination result of the determining unit being unsatisfied;

an obtaining unit 803, configured to obtain the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request;

the obtaining unit 803 is specifically configured to obtain, by calling a RESTful API interface, the quantum random number resource provided by the central quantum random number service platform in response to the quantum random number resource request.

A storage unit 804, configured to store the obtained quantum random number resource in a random storage pool corresponding to the distributed quantum random number service platform;

a providing unit 805, configured to provide the quantum random number resource in response to a client obtaining request for the quantum random number resource.

Further comprising: and the providing unit is used for providing the quantum random number resource according to the received quantum random number resource request when the storage capacity of the stored quantum random number resource in the random number storage pool corresponding to the distributed quantum random number service platform meets the set resource storage capacity requirement. Namely, the distributed quantum random number service platform directly provides the quantum random number resource to a requester sending a quantum random number resource request. Based on the foregoing embodiments, in this embodiment, the requestor of the quantum random number resource request is a client.

Based on the above, the present application further provides a computer storage medium for storing data generated by a network platform and a program for processing the data generated by the network platform;

when the program is read and executed, the following steps are executed:

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

or, the following steps are executed:

Based on the above, the present application further provides an electronic device, as shown in fig. 9, an embodiment of the electronic device includes:

a processor 901;

a memory 902 for storing a program for processing network platform generated data, which when read and executed by the processor performs the steps of:

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

or, the following steps are executed:

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include forms of volatile memory in a computer readable medium, Random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). Memory is an example of a computer-readable medium.

1. Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include non-transitory computer readable media (transient media), such as modulated data signals and carrier waves.

2. As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

Although the present application has been described with reference to the preferred embodiments, it is not intended to limit the present application, and those skilled in the art can make variations and modifications without departing from the spirit and scope of the present application, therefore, the scope of the present application should be determined by the claims that follow.

Claims

1. A quantum random number service management system, comprising: a first cluster and a client;

2. The quantum random number service management system of claim 1, further comprising: a second cluster;

3. The quantum random number service management system according to claim 2, wherein the client obtains the quantum random number resource provided by the central quantum random number service platform to the distributed quantum random number service platform through the distributed quantum random number service platform, and the method comprises:

4. The quantum random number service management system of claim 2, further comprising: determining whether the storage capacity of the stored quantum random number resource in a random number storage pool of the distributed quantum random number service platform meets the set resource storage capacity requirement;

5. The quantum random number service management system according to claim 1, wherein the central quantum random number service platform, when connected to the physical host to form at least two quantum random number generation devices when acquiring the quantum random numbers, acquires the quantum random numbers through device interfaces provided by the quantum random number generation devices respectively;

6. The quantum random number service management system of claim 1, wherein the client further comprises:

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

7. The quantum random number service management system of claim 6, wherein the client further comprises:

the determining the entropy source data as a random number seed comprises:

8. The quantum random number service management system of claim 1, further comprising:

9. A method for providing quantum random number service, comprising:

10. The method for providing quantum random number service according to claim 9, wherein the obtaining the quantum random number generated by the quantum random number generating device connected to the physical host based on the central quantum random number service platform comprises:

11. The method for providing quantum random number service according to claim 9, wherein the obtaining the quantum random number generated by the quantum random number generating device connected to the physical host based on the central quantum random number service platform comprises:

12. The method of claim 9, wherein the providing the quantum random number resource by the central quantum random number service platform in response to a quantum random number resource request comprises:

13. An apparatus for providing a quantum random number service, comprising:

14. A method for requesting quantum random number service, comprising:

sending an acquisition request of quantum random number resources;

15. The method of requesting a quantum random number service of claim 14, further comprising:

determining the entropy source data as a random number seed;

and generating a random number sequence according to the random number seed.

16. The method of requesting a quantum random number service of claim 15, further comprising:

the determining the entropy source data as a random number seed comprises:

17. A request apparatus for quantum random number service, comprising:

18. A method for requesting quantum random number service, comprising:

19. The method for requesting quantum random number service according to claim 18, wherein the determining whether the storage capacity of the stored quantum random number resource in the random number storage pool corresponding to the distributed quantum random number service platform meets the set resource storage capacity requirement includes:

or,

20. The method of claim 18, further comprising:

21. A request apparatus for quantum random number service, comprising:

22. A computer storage medium for storing network platform generated data and a program for processing the network platform generated data;

when the program is read and executed, the following steps are executed:

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

or, the following steps are executed:

23. An electronic device, comprising:

a processor;

or, the following steps are executed:

sending an acquisition request of quantum random number resources;

or, the following steps are executed: